900 matches found
CVE-2018-1350
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration...
CVE-2018-1349
CVE-2018-1349 affects the NetIQ Identity Manager driver log file, where versions prior to 4.7 expose details that could aid in system or configuration enumeration. The vulnerability is a log file information leakage issue in the NetIQ Identity Manager product. The provided connected documents cor...
CVE-2018-1350
CVE-2018-1350 affects NetIQ Identity Manager, specifically the driver log file component. Versions prior to 4.7 expose details in the log that could aid in system enumeration, representing a misconfiguration/information disclosure risk rather than code execution. The root cause is leakage of oper...
CVE-2018-7673
The CVE-2018-7673 entry describes a DoS vulnerability in the NetIQ Identity Manager communication channel for versions prior to 4.7. The affected product is NetIQ Identity Manager; affected component is the communication channel. The vulnerability allows a denial of service, with multiple sources...
CVE-2018-1350 NetIQ Identity Manager Driver Component Information Leakage
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration...
CVE-2018-1348 NetIQ Identity Manager SSL Renegotiation
NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack...
CVE-2018-1348
CVE-2018-1348 concerns the NetIQ Identity Manager driver. Versions prior to 4.7 are vulnerable to an SSL handshake renegotiation issue that could enable a man-in-the-middle (MITM) attack . The vulnerability arises during TLS renegotiation, enabling an attacker with network access to potentially i...
CVE-2018-1349 NetIQ Identity Manager Driver Component Log File Information Leakage
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration...
CVE-2018-7673 NetIQ Identity Manager DoS Attack
The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack...
NetIQ iManager Communication Downgrade Attack Vulnerability
NetIQ iManager is a WEB-based application from American NetIQ. You can use wireless devices to manage and configure eDirectory objects. A security vulnerability exists in NetIQ iManager versions prior to 3.1. An attacker can exploit this vulnerability to perform a degradation attack...
NetIQ iManager Cross-Site Scripting Vulnerability (CNVD-2018-07544)
NetIQ iManager is a WEB-based application from American NetIQ. You can use wireless devices to manage and configure eDirectory objects. A cross-site scripting vulnerability exists in the management web interface in NetIQ iManager versions prior to 3.1. A remote attacker can exploit this...
NetIQ eDirectory Denial of Service Vulnerability
NetIQ eDirectory is an identity management infrastructure platform that combines identity management architecture and directory service technology. The platform provides authentication policies, data backup and recovery services, data disaster recovery and other functions. A security vulnerabilit...
NetIQ iManager Elevation of Privilege Vulnerability
NetIQ iManager is a WEB-based application from American NetIQ. You can use wireless devices to manage and configure eDirectory objects. A security vulnerability exists in versions of NetIQ iManager prior to 3.1. No detailed vulnerability details are provided at this time...
CVE-2018-1344
Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1...
Cross site scripting
The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting...
Privilege escalation
NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack...
CVE-2018-1345
NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack...
CVE-2018-1347
The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting...